
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c0a06f9-f1b8-4b48-b119-f6f0361bf0a6.roa
File: 5c0a06f9-f1b8-4b48-b119-f6f0361bf0a6.roa (raw, json)
Hash identifier: 1sZLo5wPnc2Y+4KYGDVuPvC257xLjxkcv71VbdRkjag=
Subject key identifier: 61:43:36:39:DA:52:18:36:2F:11:4F:27:55:A4:42:E7:7A:86:10:C3
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 49D3C819DAE3F35596DDBB5FF36E3E5EEE433376
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c0a06f9-f1b8-4b48-b119-f6f0361bf0a6.roa
Signing time: Tue 21 Oct 2025 13:00:10 +0000
ROA not before: Tue 21 Oct 2025 13:00:10 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0fb:e000::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:d3:c8:19:da:e3:f3:55:96:dd:bb:5f:f3:6e:3e:5e:ee:43:33:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Oct 21 13:00:10 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=9f9f9428f3fab6817220e41c7c450fcb0ce5bfe2d917e4212e2ddc717730d2b7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6b:fb:a2:8a:59:32:c2:e5:8b:cb:3a:41:a4:
3d:1d:ff:6b:55:39:77:0d:1f:f2:0f:72:77:56:11:
56:b1:d9:c6:8d:fb:29:5c:b8:5e:7e:2b:48:8d:f4:
a8:d7:b5:19:7b:37:5a:cb:72:b8:cb:4c:c8:3f:43:
7e:99:04:21:4e:7b:34:1d:30:03:d2:2b:c5:3c:a7:
d4:a9:7d:e0:b6:3f:4d:cd:d4:af:7f:6e:9f:a0:51:
22:4b:b4:ed:f1:4a:61:24:f4:11:0c:8f:fc:1c:5f:
c7:17:b3:76:57:24:37:a7:6e:39:44:3f:42:8f:5e:
4b:f8:3d:85:5d:22:94:ea:fd:3c:ec:b0:26:e5:9e:
8e:39:36:85:de:12:cb:1d:74:c7:99:09:40:f8:eb:
46:23:9e:22:4d:ae:ab:fa:cd:6d:4f:31:72:df:c6:
43:44:27:ae:16:cf:02:f6:dc:f5:97:88:88:77:e0:
56:42:34:04:5e:18:10:6f:b8:0c:3e:b4:45:ad:5b:
32:fc:24:e5:a7:94:d9:12:ce:01:4b:35:a0:e6:56:
d3:ca:af:01:d7:d5:5e:37:82:f6:33:1d:b6:11:e5:
6a:62:9e:6a:5b:b5:8a:d7:80:bc:dc:5e:77:52:8c:
9a:0c:09:1d:7c:71:a8:8e:53:04:48:11:a0:cb:e6:
bf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:43:36:39:DA:52:18:36:2F:11:4F:27:55:A4:42:E7:7A:86:10:C3
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c0a06f9-f1b8-4b48-b119-f6f0361bf0a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:e000::/42
Signature Algorithm: sha256WithRSAEncryption
1e:fb:f3:bf:89:f9:e9:a2:c4:78:e6:13:a8:38:b2:89:d3:b3:
5c:af:e3:b1:ab:16:ef:25:8a:5c:9e:26:9b:69:f9:23:1d:10:
41:91:bb:03:82:16:fb:c2:d6:ba:92:1f:d1:d1:7f:93:29:2b:
3e:76:ba:70:44:6d:29:24:fb:a7:69:28:dc:18:6b:5f:9a:1a:
ef:ec:07:dc:87:ee:61:38:10:a7:93:66:c1:ac:ab:9f:f0:c5:
15:32:ae:51:a9:72:12:11:c7:2d:cd:6c:c4:5c:59:4c:d6:82:
f4:21:60:6c:a1:5f:81:d1:2a:7b:12:35:ef:25:7d:27:98:cb:
80:c4:cf:d8:8a:bc:b4:d7:d4:3c:e9:40:9d:7a:8b:61:e7:d1:
f3:cd:fa:ee:ae:fe:33:1b:ca:e5:a9:16:fa:dd:de:b3:39:0f:
41:8c:2c:39:fa:de:bf:73:ee:88:8b:6f:66:e3:34:e7:5b:ef:
48:44:06:8b:2b:5d:4b:f2:45:2f:0a:c6:31:ca:42:9a:16:a3:
8f:dc:a2:d2:de:c1:9c:67:bd:39:de:46:8b:54:f5:1a:27:ef:
eb:5d:18:41:39:56:b7:db:0d:47:7c:f1:7e:11:10:b8:c5:7b:
e2:cb:ae:f1:37:a0:8f:b3:3c:9c:64:48:7c:52:19:86:4a:27:
3a:66:ec:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:07 2025 by rpki-client